filipt

{"schema_version":"1.7.4","id":"MAL-2026-18580","published":"2026-11-03T19:28:17Z","modified":"2026-11-08T10:13:03.540916985Z","summary":"Malicious code in filipt (PyPI)","details":"\n---\n_-= Per source details. Do not edit below this line.=-_\n\n## Source: amazon-inspector (a214411b19c9576191a2bde7b40d921418dc236bcfac35cab6e467d7c879667b)\nfilipt 0.1.5 bundles a 34MB unsigned Windows PE (filipt/Helper.exe) and arranges for it to run both at install time and on every subsequent Python interpreter start. setup.py's custom build_py.run() copies Helper.exe to %TEMP% and launches it detached via subprocess.Popen with DETACHED_PROCESS | CREATE_NEW_PROCESS_GROUP during 'pip install' on Windows. bdist_wheel.run() rewrites the produced wheel to inject a filipt.pth file into site-packages containing 'import filipt._launch; filipt._launch.fire_once()'; because Python's site module auto-executes.pth import lines at interpreter startup, every subsequent 'python' invocation re-copies Helper.exe to a unique %TEMP% path and spawns it detached (a per-version marker caps it to once per interpreter start per version). The binary itself imports BCryptOpenAlgorithmProvider / BCryptGenerateSymmetricKey / BCryptDecrypt, VirtualProtect, CreateProcessA, and reads USERDOMAIN / USERNAME via GetEnvironmentVariableA, and contains large high-entropy regions and a base64 alphabet — the shape of a packed/encrypted loader whose real payload is decrypted at runtime and not statically visible. Publisher metadata is a placeholder (github.com/example/utilities), the binary is unsigned, and nothing about this behavior is documented. The.pth injection means harm is not limited to install time or to imports of filipt — any Python process started on a machine where filipt is installed re-runs the opaque binary.\n\n## Source: kam193 (71274850343391005d2d9594031bd612ad45b58389feeb4e416481d3c8b5e3e2)\nThe package ships a malicious executable started during the building of a wheel/installation. It has been identified as malicious by multiple vendors.\n\n\n---\n\nCategory: MALICIOUS - The campaign has clearly malicious intent, like infostealers.\n\n\nCampaign: 2026-11-filipt\n\n\nReasons (based on the campaign):\n\n\n - The package overrides the install command in setup.py to execute malicious code during installation.\n\n\n - malware\n\n\n - rat\n","affected":[{"package":{"name":"filipt","ecosystem":"PyPI"},"versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5"],"database_specific":{"cwes":[{"cweId":"CWE-506","description":"The product contains code that appears to be malicious in nature.","name":"Embedded Malicious Code"}],"indicators":{"evidence_files":[{"artifacts":["filipt-0.1.5.tar.gz"],"path":"setup.py","sha256":"650fdf95fabdf4bdd8df47d6fa87c9342fb4c8ded2a4e64343dc29a5e41bb02d","tlsh":"4c7161239c0ea27182f146aa9953a6b2c7741377bb6611523cbcd3201f3a4b1c57a56e"},{"artifacts":["filipt-0.1.5.tar.gz"],"path":"filipt/Helper.exe","sha256":"e5a585e03e1725d5030fd4854805933d53aa86cfbbb0b3808dffcc63782ddf38","tlsh":"287733cc2241b4accc69197cbc83a6329d463ceb896cbe2fd8c6722bf171445795dd98"}],"package_integrity":[{"filename":"filipt-0.1.5.tar.gz","hashes":{"blake2b_256":"4d830c8cf73a5ba5b0d2c2cb1d94152bba613020a818a87b5ae1e1c515339e2a","md5":"48f934fb509e103b0f6bfa05bfb3cb5c","sha256":"6f6af4d01d18e1fd104e8004c25a390456f4838c3ee1aba91920219b7ad6cbfc"}}]}}}],"references":[{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/e5a585e03e1725d5030fd4854805933d53aa86cfbbb0b3808dffcc63782ddf38/detection"},{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/1a89eb45ed45780f16499b0f87ff3dd17db4be0988f7befbfa88224d83fccae2/detection"},{"type":"EVIDENCE","url":"https://tria.ge/261103-xxcp9aez3r"},{"type":"WEB","url":"https://bad-packages.kam193.eu/pypi/package/filipt"},{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/c8ecde6b3840ab32ceace277f7fd1bfc63eb87344ab9147651e3c4c11dbbac93/detection"},{"type":"EVIDENCE","url":"https://www.virustotal.com/gui/file/f511eff8b0cec4854856e3686a3eded0decf5fa3b04d585f9f2e951b7d13c295/detection"},{"type":"PACKAGE","url":"https://pypi.org/project/filipt/0.1.5/"}],"database_specific":{"malicious-packages-origins":[{"id":"pypi/2026-11-filipt/filipt","import_time":"2026-11-03T20:13:15.85442175Z","modified_time":"2026-11-03T19:28:17.117194Z","sha256":"c7d24a42d93443e6dd0a5c3899e31e60624c1564a215ad84be99be1e811205ca","source":"kam193","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5"]},{"id":"pypi/2026-11-filipt/filipt","import_time":"2026-11-03T22:11:18.880581558Z","modified_time":"2026-11-03T19:28:17.117194Z","sha256":"71274850343391005d2d9594031bd612ad45b58389feeb4e416481d3c8b5e3e2","source":"kam193","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5"]},{"id":"pypi/2026-11-filipt/filipt","import_time":"2026-11-03T23:11:26.532418537Z","modified_time":"2026-11-03T19:28:17.117194Z","sha256":"ac208e914480dac86130a64e95150acb19051df83f5a716ed1f59f8c89d5b0bc","source":"kam193","versions":["0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5"]},{"id":"IN-MAL-2026-022577","import_time":"2026-11-08T10:11:10.15859074Z","modified_time":"2026-11-08T09:43:43Z","sha256":"a214411b19c9576191a2bde7b40d921418dc236bcfac35cab6e467d7c879667b","source":"amazon-inspector","versions":["0.1.5"]}]},"credits":[{"name":"Amazon Inspector","contact":["inspector-research@amazon.com"],"type":"FINDER"},{"name":"Kamil Mańkowski (kam193)","contact":["https://github.com/kam193","https://bad-packages.kam193.eu/"],"type":"REPORTER"}]}